Privacy Notice

Last updated: 27 October 2026. Version: v1-2026-10.

1. Who we are

This website, klreconcar.com (KL Recon Car), is run by Angsa Emas. We sell reconditioned imported cars in Kuala Lumpur. In this notice, we and us mean Angsa Emas.

Privacy contact: WhatsApp +60 16-522 2116.

2. What personal data we collect

When you use the car builder and send your number, we collect:

Your WhatsApp or mobile number (required, we cannot reply without it).
The car you built: model, trim, colour, interior, options, year, mileage and grade you chose, and the price range and matching cars shown to you.
Optional answers you tap after sending: whether you have a car to trade in, and whether you will pay by loan or cash.
Marketing details from the link you clicked: UTM tags and the Facebook click ID (fbclid) in the web address.
The version of the consent wording shown to you (consent-v1-2026-10). We record it with your lead so we can show what you agreed to.

We do not ask for your name, IC number, address, bank details or any sensitive personal data. Please do not type them into the website.

If you only browse and do not send your number, we still receive technical data described in section 7.

3. Why we collect it

To reply to your request: confirm which cars are available, send real prices and photos, and arrange a viewing.
To prepare a loan or trade-in discussion if you tap those answers.
To keep a record of your enquiry and of the consent wording you agreed to.
To measure which ads and posts bring enquiries (so we spend less on ads that do not work).

We will not use your number for promotions about other cars unless you agree to that separately.

4. How we contact you

We use WhatsApp, and sometimes a phone call, about the car you asked about, and loan or trade-in questions. We do not sell your number. We do not send mass spam.

You can tell us to stop at any time: reply STOP on WhatsApp, or WhatsApp us at +60 16-522 2116. We will stop contacting you for marketing within 14 days (the law says after a reasonable period).

5. Who receives your data

Only the people at Angsa Emas who answer enquiries can see your lead. We also use these service providers to run the website and receive leads:

Telegram (Telegram Messenger): our private chat that receives each lead in real time.
Google (Google Sheets and Google Apps Script): a spreadsheet where each lead is stored.
Cloudflare: hosts the website and passes your request to our systems.
Meta Platforms (Facebook and Instagram): the Meta Pixel, see section 7. Also, if you tap the WhatsApp button, WhatsApp (owned by Meta) handles that chat.

We may also give your details to a bank or finance company only if you ask us to help with a loan, and only with your agreement at that time. We disclose data to the authorities only when the law requires.

6. Your data goes outside Malaysia

Telegram, Google, Cloudflare and Meta run servers outside Malaysia, so your data may be stored or processed in other countries. By sending your number you agree to this. We choose well known providers and restrict who can open our accounts, but we cannot control their overseas laws.

7. Cookies, Meta Pixel, fonts and similar tools

Malaysia has no separate cookie law, but we tell you what the site does:

Meta Pixel. The Meta Pixel (pixel ID 1176629058027860) loads only after the page has finished loading. It tells Meta when you view a page (PageView), when you send your number (Lead), and when you tap a WhatsApp link (Contact). Meta may set cookies such as _fbp and _fbc and may receive your IP address, browser details, the page address, and its own identifiers. Meta uses this to measure our ads, show you our ads, and improve its own products, under its own privacy policy.
Your Pixel choice. On your first visit, a notice strip at the bottom of the page offers OK or No thanks. If you tap No thanks, the Pixel is switched off for that browser. Your choice is remembered in your browser's local storage under the key ae_pixel.
Browser storage. When you arrive from an ad, we keep the ad tags (UTM and fbclid) in your browser's session storage until you close the tab. They are attached to your lead if you send one.
Fonts. The website font is served from our own site.
Cloudflare. Receives your IP address and request details to deliver the site and protect it from attacks.

How to say no: tap No thanks on the notice strip. In Facebook, open Settings, then Ads, and turn off ads based on data from partners. Or use your browser's tracking protection or an ad blocker. The site will still work. You can also WhatsApp us at +60 16-522 2116 to delete your lead.

8. How long we keep it

We keep leads that did not become a sale for 12 months, then delete or anonymise them. If you buy a car, we keep the sale records for as long as the law and our business records require.

9. How we protect it

Our lead chat and spreadsheet are private, limited to named staff, and protected by two step login. No system is perfectly safe. If a breach is likely to cause you serious harm, we will tell the Personal Data Protection Commissioner and you as the law requires.

10. Your rights

Under the Personal Data Protection Act 2010, you can write to us to:

Ask what personal data we hold about you and get a copy.
Correct data that is wrong.
Withdraw your consent. This may mean we cannot keep helping you with your enquiry.
Stop us using your data for direct marketing.
Ask us to send your data to another organisation, where this is technically possible.
Complain. If you are not happy with our reply, you can complain to the Personal Data Protection Commissioner.

WhatsApp us at +60 16-522 2116. We may need to check it is really you. We aim to reply within 21 days.

11. Is giving your data compulsory

Your WhatsApp number is required to use the form. If you do not want to give it, you can still browse. The two follow up answers are optional.

12. Children

This website is for adults who can buy a car. We do not knowingly collect data from anyone under 18.

13. Changes

We will update this notice when our practices change and show the new date at the top.

14. Language

This notice is also in Bahasa Malaysia (Notis Privasi). If the two versions differ, the English version applies.